Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: FLjkcydo4dz9TiEfmRoP94I80pSJZYQA71jGgFVfpgk=
Subject key identifier: 85:EC:6B:BB:07:55:69:5B:76:E1:85:C2:A7:E6:0D:69:F1:A7:CA:B2
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 0196C615DEE1C280626F5BFB5DBC51CFCB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 08D8
Signing time: Mon 12 May 2025 20:00:43 +0000
Manifest this update: Mon 12 May 2025 20:00:43 +0000
Manifest next update: Tue 13 May 2025 20:00:43 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: LP0w2ZAToULOzxo9s1GAwJjoNvx3NcOfebdFh+vMB+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:de:e1:c2:80:62:6f:5b:fb:5d:bc:51:cf:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: May 12 20:00:43 2025 GMT
Not After : May 13 20:00:43 2025 GMT
Subject: CN=85ec6bbb0755695b76e185c2a7e60d69f1a7cab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:76:b9:1c:1e:8a:03:65:3f:28:95:44:a8:
50:13:16:05:cb:f9:4c:82:9f:44:f3:4f:84:e9:11:
50:66:5a:f2:de:6e:56:83:f9:41:c9:1d:11:92:7d:
63:c9:b2:f6:09:96:b6:c7:7e:e0:07:55:2c:75:05:
22:b0:82:f4:a8:88:a7:fc:2e:cc:15:86:5d:ac:2b:
94:f4:4a:8c:f3:ee:3f:12:c2:87:fd:b7:e8:50:3a:
a8:83:2c:95:20:80:9a:e6:c1:4d:79:25:5f:1a:53:
ca:d0:d0:44:c5:f7:f2:84:fa:68:71:fb:f7:6d:42:
30:d7:24:e0:5c:06:f7:56:29:47:d9:a2:0b:cf:48:
1c:74:6f:26:64:47:11:76:d9:17:f8:00:3a:9f:0c:
12:bb:0c:0e:db:b4:6e:33:3b:2a:3d:57:a0:af:0d:
ef:9f:24:5c:72:b6:95:9e:b6:d7:1a:56:14:42:2e:
2c:15:e1:39:ae:17:51:df:b3:7a:3a:1e:27:09:36:
8b:ac:dc:e7:61:07:45:8a:be:aa:bf:8a:b2:58:94:
df:89:41:87:37:4e:88:8d:f2:ec:4b:31:57:60:d0:
9a:45:91:d4:f8:c9:7b:79:93:8a:2a:2b:6b:5d:4b:
08:2b:ec:87:f8:52:ea:99:ea:b3:00:c6:39:04:e1:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:6B:BB:07:55:69:5B:76:E1:85:C2:A7:E6:0D:69:F1:A7:CA:B2
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:71:0f:3d:dc:80:96:1c:89:6a:41:bf:56:07:01:e3:7f:d9:
56:ff:a9:8b:8b:34:5c:70:ef:a5:5d:99:48:59:29:c2:10:f4:
b8:eb:59:f9:78:df:ca:ae:c8:7d:af:9e:c2:0b:2c:72:c1:e7:
35:29:d9:c0:07:4f:d4:df:39:b1:65:a1:c8:64:04:a9:64:40:
41:5f:a2:cc:9a:44:16:66:de:13:a5:cc:8e:ea:b2:11:d3:0e:
d3:2e:88:4a:ca:91:30:35:b0:52:ff:07:70:ee:50:d2:30:9e:
a1:50:bf:ab:61:db:58:7d:b8:48:fd:a8:bf:d6:98:c3:52:1a:
0a:42:02:e1:3f:df:62:c2:31:df:5e:72:e9:55:c6:d1:62:b1:
0a:42:4d:dc:e0:58:c1:68:bf:3f:fc:26:bc:79:81:33:ea:d8:
1c:c5:cf:96:7c:93:04:39:47:bc:1a:09:fb:08:33:42:ed:bc:
bf:00:c7:5d:da:72:aa:e0:12:01:03:dd:ea:d0:3e:d3:2f:43:
ea:4f:56:51:14:d4:56:a7:92:fe:71:57:bc:8e:ac:91:1a:3a:
5b:ae:4b:84:0a:cc:61:11:67:4d:4a:61:25:51:99:9a:6f:42:
0e:1d:a2:29:02:69:e2:bc:0e:53:22:41:80:83:ac:03:dd:c3:
a4:64:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:39:56 2025 by rpki-client